CN109766700A - Access control method and device, the storage medium, electronic device of file - Google Patents
Access control method and device, the storage medium, electronic device of file Download PDFInfo
- Publication number
- CN109766700A CN109766700A CN201811645720.8A CN201811645720A CN109766700A CN 109766700 A CN109766700 A CN 109766700A CN 201811645720 A CN201811645720 A CN 201811645720A CN 109766700 A CN109766700 A CN 109766700A
- Authority
- CN
- China
- Prior art keywords
- main body
- file
- file destination
- operating main
- operation behavior
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
- G06F21/57—Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
- G06F21/577—Assessing vulnerabilities and evaluating computer system security
Landscapes
- Engineering & Computer Science (AREA)
- Computer Hardware Design (AREA)
- Computer Security & Cryptography (AREA)
- General Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Software Systems (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Computing Systems (AREA)
- Storage Device Security (AREA)
- Computer And Data Communications (AREA)
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
- Information Transfer Between Computers (AREA)
- Mobile Radio Communication Systems (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The present invention provides a kind of control method and device for accessing file, storage medium, electronic device, wherein this method comprises: the operation behavior of test access file destination；The operating main body of the operation behavior is identified in server local, wherein the operating main body is the process for triggering the operation behavior；When the operating main body does not have the access authority to the file destination, the operation behavior is intercepted.Through the invention, it solves the low technical problem of the safety of file in the related technology, improves the safety of file.
Description
Technical field
The present invention relates to computer fields, are situated between in particular to a kind of control method and device for accessing file, storage
Matter, electronic device.
Background technique
File is the common form that information data is stored in equipment, due to the popularity that it uses and transmits, usual situation
Under, file can be accessed by any operating main body, or even editor.
In the related technology, it to the operating right of file, is controlled by the way that the permission of login user is arranged, or setting
Concealed space protects file, such as the accessible user file of general user's account, the accessible system file of administrator's account
Deng, and any restrictions are not done to the access control of process, so the malicious operation using trusted process to file can not be protected, it is hidden
Hide space also can only passive protection file, influence the normal use of user.
For the above problem present in the relevant technologies, at present it is not yet found that the solution of effect.
Summary of the invention
The embodiment of the invention provides a kind of control method and device for accessing file, storage medium, electronic device.
According to one embodiment of present invention, a kind of control method for accessing file is provided, comprising: test access target
The operation behavior of file；The operating main body of the operation behavior is identified in server local, wherein the operating main body is triggering
The process of the operation behavior；When the operating main body does not have the access authority to the file destination, the behaviour is intercepted
Make behavior.
Optionally, the operating main body for identifying the operation behavior includes: to identify the operation behavior in server local
Operating main body includes: the memory sequence for acquiring the operation behavior from client in server local, wherein the file destination
It operates in the client；The process identification (PID) in the memory sequence is parsed, the father that the operation behavior corresponds to process is obtained
Process；The parent process is determined as to the operating main body of the operation behavior.
Optionally, before intercepting the operation behavior, the method also includes: judge the operating rights of the operating main body
Whether limit range includes access authority to the file destination；It include to described in the operating right range of the operating main body
The access authority of file destination determines that the operating main body has the access authority to the file destination；It is led in the operation
When the operating right range of body does not include the access authority to the file destination, determine that the operating main body does not have to described
The access authority of file destination.
Optionally, whether the operating right range for judging the operating main body includes access authority to the file destination
It include: the file permission library for obtaining the operating main body, wherein the file permission library includes allowing the operating main body legal
The file identification of the file of access；Judge the file permission library whether include the file destination file identification；Described
When file permission library includes the file identification of the file destination, determine that the operating right range of the operating main body includes to institute
State the access authority of file destination；When the file permission library does not include the file identification of the file destination, described in determination
The operating right range of operating main body does not include the access authority to the file destination.
Optionally, before intercepting the operation behavior, the method also includes: judge the legal visit of the file destination
Ask whether object includes the operating main body；When the Lawful access object of the file destination includes the operating main body, really
The fixed operating main body has the access authority to the file destination；Do not include in the Lawful access object of the file destination
When the operating main body, determine that the operating main body does not have the access authority to the file destination.
Optionally, described before whether the Lawful access object for judging the file destination includes the operating main body
Method further include: multiple software packages are collected by specified channel, wherein the software package includes the file destination；To described
Software package is installed and is decompressed, and multiple associated withs are obtained, wherein the associated with includes the text of software package oneself creation
Part, and the file directly or indirectly created together with oneself by same software package；Obtain the Hash of the multiple associated with
Information, wherein the Hash information is used to indicate the identity of associated with；The corresponding associated with of the Hash information is determined
For the member of the Lawful access object, and establish the incidence relation between the Hash information and the file destination.
Optionally, the method also includes: when the operating main body has the access authority to the file destination, put
The row operation behavior；Or, position the operating main body after intercepting the operation behavior, block the operating main body with
Calling channel between the file destination.
According to another embodiment of the invention, a kind of control device for accessing file is provided, comprising: detection module,
Operation behavior for test access file destination；Identification module, for identifying the behaviour of the operation behavior in server local
Make main body, wherein the operating main body is the process for triggering the operation behavior；Blocking module, in the operating main body
When not having the access authority to the file destination, the operation behavior is intercepted.
Optionally, the identification module includes: reading unit, for acquiring the operation from client in server local
The memory sequence of behavior, wherein the file destination operates in the client；Resolution unit, for parsing the memory
Process identification (PID) in sequence obtains the parent process that the operation behavior corresponds to process；Determination unit, for the parent process is true
It is set to the operating main body of the operation behavior.
Optionally, described device further include: judgment module, for the blocking module intercept the operation behavior it
Before, judge whether the operating right range of the operating main body includes access authority to the file destination；Determining module is used
In when the operating right range of the operating main body includes the access authority to the file destination, the operating main body is determined
Has the access authority to the file destination；It does not include to the file destination in the operating right range of the operating main body
Access authority when, determine that the operating main body does not have the access authority to the file destination.
Optionally, described device further include: first judgment module, for intercepting the operation behavior in the blocking module
Before, whether the operating right range for judging the operating main body includes access authority to the file destination；First determines
Module, described in determining when the operating right range of the operating main body includes the access authority to the file destination
Operating main body has the access authority to the file destination；It does not include to described in the operating right range of the operating main body
When the access authority of file destination, determine that the operating main body does not have the access authority to the file destination.
Optionally, the first judgment module includes: acquiring unit, for obtaining the file permission of the operating main body
Library, wherein the file permission library includes the file identification for allowing the file of the operating main body Lawful access；Judging unit,
For judge the file permission library whether include the file destination file identification；Determination unit, in the file
When authority library includes the file identification of the file destination, determine that the operating right range of the operating main body includes to the mesh
Mark the access authority of file；When the file permission library does not include the file identification of the file destination, the operation is determined
The operating right range of main body does not include the access authority to the file destination.
Optionally, described device further include: the second judgment module, for intercepting the operation behavior in the blocking module
Before, whether the Lawful access object for judging the file destination includes the operating main body；Second determining module, in institute
When the Lawful access object for stating file destination includes the operating main body, determine that the operating main body has to the file destination
Access authority；When the Lawful access object of the file destination does not include the operating main body, the operating main body is determined
Do not have the access authority to the file destination.
Optionally, described device further include: setup module, for being in the Lawful access object for judging the file destination
It is no include the operating main body before, the set of the Lawful access object is set.
Optionally, the setup module includes: collector unit, for collecting multiple software packages by specified channel, wherein
The software package includes the file destination；Processing unit obtains multiple passes for the software package to be installed and decompressed
Join file, wherein the associated with include software package oneself creation file, and together with oneself it is straight by same software package
The file for connecing or creating indirectly；Acquiring unit, for obtaining the Hash information of the multiple associated with, wherein the Hash
Information is used to indicate the identity of associated with；Unit is established, for the corresponding associated with of the Hash information to be determined as institute
The member of Lawful access object is stated, and establishes the incidence relation between the Hash information and the file destination.
Optionally, described device further include: clearance module, for having in the operating main body to the file destination
When access authority, the operation behavior of letting pass.
Optionally, described device further include: trace back block, for the blocking module intercept the operation behavior it
Afterwards, the operating main body is positioned, the calling channel between the operating main body and the file destination is blocked.
According to still another embodiment of the invention, a kind of storage medium is additionally provided, meter is stored in the storage medium
Calculation machine program, wherein the computer program is arranged to execute the step in any of the above-described Installation practice when operation.
According to still another embodiment of the invention, a kind of electronic device, including memory and processor are additionally provided, it is described
Computer program is stored in memory, the processor is arranged to run the computer program to execute any of the above-described
Step in embodiment of the method.
Through the invention, the operation behavior of test access file destination, and identify the operating main body of the operation behavior,
When the operating main body does not have the access authority to the file destination, the operation behavior is intercepted, by by the quilt of file
Access privilege control within the scope of default access, only the ownership main body of file destination could access target file, can prevent
Illegal operation is carried out to file by control third party's trusted process, avoids and reduces due to attacking trusted software and carrying out operation file
The loss of generation solves the low technical problem of the safety of file in the related technology, improves the safety of file.
Detailed description of the invention
The drawings described herein are used to provide a further understanding of the present invention, constitutes part of this application, this hair
Bright illustrative embodiments and their description are used to explain the present invention, and are not constituted improper limitations of the present invention.In the accompanying drawings:
Fig. 1 is a kind of hardware block diagram of the control server of access file of the embodiment of the present invention；
Fig. 2 is a kind of flow chart of control method for accessing file according to an embodiment of the present invention；
Fig. 3 is the application scenario diagram of the embodiment of the present invention；
Fig. 4 is the structural block diagram of the control device of access file according to an embodiment of the present invention.
Specific embodiment
In order to make those skilled in the art more fully understand application scheme, below in conjunction in the embodiment of the present application
Attached drawing, the technical scheme in the embodiment of the application is clearly and completely described, it is clear that described embodiment is only
The embodiment of the application a part, instead of all the embodiments.Based on the embodiment in the application, ordinary skill people
Member's every other embodiment obtained without making creative work, all should belong to the model of the application protection
It encloses.It should be noted that in the absence of conflict, the features in the embodiments and the embodiments of the present application can be mutual group
It closes.
It should be noted that the description and claims of this application and term " first " in above-mentioned attached drawing, "
Two " etc. be to be used to distinguish similar objects, without being used to describe a particular order or precedence order.It should be understood that using in this way
Data be interchangeable under appropriate circumstances, so as to embodiments herein described herein can in addition to illustrating herein or
Sequence other than those of description is implemented.In addition, term " includes " and " having " and their any deformation, it is intended that cover
Cover it is non-exclusive include, for example, the process, method, system, product or equipment for containing a series of steps or units are not necessarily limited to
Step or unit those of is clearly listed, but may include be not clearly listed or for these process, methods, product
Or other step or units that equipment is intrinsic.
Embodiment 1
Embodiment of the method provided by the embodiment of the present application one can mobile terminal, terminal, server or
It is executed in similar arithmetic unit.For running on the server, Fig. 1 is a kind of control of access file of the embodiment of the present invention
The hardware block diagram of control server.As shown in Figure 1, server 10 may include one or more (only showing one in Fig. 1)
(processor 102 can include but is not limited to the processing dress of Micro-processor MCV or programmable logic device FPGA etc. to processor 102
Set) and memory 104 for storing data, optionally, above-mentioned server can also include setting for the transmission of communication function
Standby 106 and input-output equipment 108.It will appreciated by the skilled person that structure shown in FIG. 1 is only to illustrate,
The structure of above-mentioned server is not caused to limit.For example, server 10 may also include it is more or less than shown in Fig. 1
Component, or with the configuration different from shown in Fig. 1.
Memory 104 can be used for storing computer program, for example, the software program and module of application software, such as this hair
One of bright embodiment accesses the corresponding computer program of control method of file, and processor 102 is stored in by operation
Computer program in reservoir 104 realizes above-mentioned method thereby executing various function application and data processing.Storage
Device 104 may include high speed random access memory, may also include nonvolatile memory, as one or more magnetic storage device,
Flash memory or other non-volatile solid state memories.In some instances, memory 104 can further comprise relative to processing
The remotely located memory of device 102, these remote memories can pass through network connection to server 10.The example of above-mentioned network
Including but not limited to internet, intranet, local area network, mobile radio communication and combinations thereof.
Transmitting device 106 is used to that data to be received or sent via a network.Above-mentioned network specific example may include
The wireless network that the communication providers of server 10 provide.In an example, transmitting device 106 includes a network adapter
(Network Interface Controller, referred to as NIC), can be connected by base station with other network equipments so as to
It is communicated with internet.In an example, transmitting device 106 can be radio frequency (Radio Frequency, referred to as RF)
Module is used to wirelessly be communicated with internet.
A kind of control method for accessing file is provided in the present embodiment, and Fig. 2 is one kind according to an embodiment of the present invention
The flow chart for accessing the control method of file, as shown in Fig. 2, the process includes the following steps:
Step S202, the operation behavior of test access file destination；
The file destination of the present embodiment detection can store in various equipment, and such as desktop computer, notebook, mobile phone is put down
Plate computer, the electronic equipment that USB flash disk, server etc. can access network or can be controlled, the operation behavior of the present embodiment
For access target file, file destination, modification, deletion, duplication, starting file destination etc. are such as read.
Step S204 identifies the operating main body of the operation behavior in server local, wherein the operating main body is touching
The process for sending out operation behavior described；Dynamic application program is process, and in the present embodiment, process and application program are equivalent
Probability；
Step S206 intercepts the operation when the operating main body does not have the access authority to the file destination
Behavior.Further, after intercepting the behavior act, prompt information or alarm information can also be generated, inform user or
The security software of equipment, there are security risk, user or security softwares can carry out testing in depth testing or place to it for file destination
Reason after operation behavior, positions the operating main body as described in intercepting, block the operating main body and the file destination it
Between calling channel, prevent the operation behavior of the subsequent initiation of the operating main body.On the other hand, have pair in the operating main body
When the access authority of the file destination, the operation behavior of letting pass.
Through the above steps, the operation behavior of test access file destination, and identify the operating main body of the operation behavior,
When the operating main body does not have the access authority to the file destination, the operation behavior is intercepted, by by file
Accessed permission control within the scope of default access, only the ownership main body of file destination could access target file, can be to prevent
Illegal operation is only carried out to file by control third party's trusted process, avoids and reduces because attack trusted software carrys out operation file
And the loss generated, it solves the low technical problem of the safety of file in the related technology, improves the safety of file.
Optionally, identify that the operating main body of the operation behavior includes: in server local from client in server local
End acquires the memory sequence of the operation behavior, wherein the file destination operates in the client；Parse the memory
Process identification (PID) in sequence obtains the parent process that the operation behavior corresponds to process；The parent process is determined as the operation
The operating main body of behavior.Each operation behavior all can generate corresponding memory sequence, such as operation of triggering in memory in triggering
Behavior is that can generate specific memory sequence in memory, and then parse the memory sequence when accessing the file destination in system disk
The process identification (PID) of column, and obtain the operating main body of the operation behavior.What is stored in the process identification (PID) is Hash information, i.e. Hash
Value, is used to indicate the identity information that operation behavior corresponds to the parent process of process, optionally, can also do to cryptographic Hash further
Verification, such as using HashTab tool verify Hash, or using PowerShell verify Hash, determine cryptographic Hash be correctly,
It was not tampered with, to prevent the identity information of operating main body to be forged.
In one example, during preparatory deployment, the working directory where the application program being currently running is collected, and mark
Know the ownership main body that the application program is each file in the working directory.
In the present embodiment, before intercepting the operation behavior, further includes: the Lawful access pair of the file destination is set
The set of elephant, the Lawful access object in the present embodiment refer to the main body for allowing Lawful access file destination.Either setting should
The operating right range of operating main body.
In an optional embodiment of the present embodiment, the set packet of the Lawful access object of the file destination is set
It includes:
S11 collects multiple software packages by specified channel, wherein the software package includes the file destination；Specified canal
Road refers to legitimate channels, and regular channel, such as official website, authentication platform, software package includes a variety of, as long as comprising the file destination,
It is either to need to call the file destination in normal work.
S12 is installed and is decompressed to the software package, obtains multiple associated withs, wherein the associated with includes
The file of software package oneself creation, and the file directly or indirectly created together with oneself by same software package；Software package is
One compressed package to be installed, by installing and decompressing, available decompression file, i.e. multiple passes below a software package
Join file；Two software packages are such as had collected, associated with is respectively as follows: { a, b, c }, { a, b, e }, wherein b, c, b, e are mesh
Mark the Lawful access object of file a；
For example, application program may only full powers operation (reading and writing, opening, deletion etc.) oneself creation or together with oneself
The file directly or indirectly created by same installation kit, it is not possible to operate (reading and writing, opening, deletion etc.) except oneself creation or
Outside the file directly or indirectly created together with oneself by same installation kit, the file of any nonsystematic.For example, application program
M oneself creates file n and file k, then application program m can be file n and text with operation file n and file k, application program m
The Lawful access object of part k, can be with mutual operation between file n and file k, Lawful access object each other.
S13 obtains the Hash information of the multiple associated with, wherein the Hash information is used to indicate associated with
Identity；
The corresponding associated with of the Hash information, is determined as the member of the Lawful access object by S14, and establishes institute
State the incidence relation between Hash information and the file destination.I.e. in associated with, in addition to oneself is accessible other than oneself, b,
C, e are also the member of Lawful access object, if operating main body is b, one of them in c, e, then it is assumed that be legal.
In the present embodiment, before intercepting the operation behavior, further includes: judge the operating rights of the operating main body
Whether limit range includes access authority to the file destination, and/or, judge that the Lawful access object of the file destination is
No includes the operating main body；In the access authority that the operating right range of the operating main body includes to the file destination,
And/or the Lawful access object of the file destination determines that the operating main body has to described when including the operating main body
The access authority of file destination；In the access right that the operating right range of the operating main body does not include to the file destination
Limit, and/or, when the Lawful access object of the file destination does not include the operating main body, determine that the operating main body does not have
The standby access authority to the file destination.Other than limiting the Lawful access object of file destination, it can also use and limit
The operating right of the operating right of operating main body, different operating main bodies may be different, as the operating main body of the first kind can
With access target file, the operating main body of Second Type cannot access target file.
Optionally, whether the operating right range for judging the operating main body includes access authority to the file destination
Include:
S21 obtains the file permission library of the operating main body, wherein the file permission library includes allowing the operation
The file identification of the file of main body Lawful access；
The ownership main body of file can establish file permission library by collecting the behavior of software in advance, for example, software exists
File operation object corresponding to the behavior of output is treated as the file (set) that the software can access under security context, then
The ownership main body of this partial document is identified at QQ process (such as QQ software)；
S22, judge the file permission library whether include the file destination file identification；
S23 determines the behaviour of the operating main body when the file permission library includes the file identification of the file destination
As the access authority that extent of competence includes to the file destination；In the text that the file permission library does not include the file destination
When part identifies, determine that the operating right range of the operating main body does not include the access authority to the file destination.
Optionally, the executing subject of above-mentioned steps can be connection one or more clients or server etc., client
Can be mobile terminal, PC etc., server can be SOCKS server, security server etc., but not limited to this.It is applying
When server end, server arrives the client of multiple operational objective files by network connection, carries out security protection, Fig. 3 to it
It is the application scenario diagram of the embodiment of the present invention, server connects multiple client, and the file destination operates in the client
On, the operation behavior of server-side test access file destination identifies the operating main body of the operation behavior in server local,
When the operating main body does not have the access authority to the file destination, the operation behavior is intercepted.
Through the above description of the embodiments, those skilled in the art can be understood that according to above-mentioned implementation
The method of example can be realized by means of software and necessary general hardware platform, naturally it is also possible to by hardware, but it is very much
In the case of the former be more preferably embodiment.Based on this understanding, technical solution of the present invention is substantially in other words to existing
The part that technology contributes can be embodied in the form of software products, which is stored in a storage
In medium (such as ROM/RAM, magnetic disk, CD), including some instructions are used so that a terminal device (can be mobile phone, calculate
Machine, server or network equipment etc.) execute method described in each embodiment of the present invention.
Embodiment 2
A kind of control device for accessing file is additionally provided in the present embodiment, can be terminal or server, the device
For realizing above-described embodiment and preferred embodiment, the descriptions that have already been made will not be repeated.As used below, term
The combination of the software and/or hardware of predetermined function may be implemented in " module ".Although device is preferably described in following embodiment
It is realized with software, but the realization of the combination of hardware or software and hardware is also that may and be contemplated.
Fig. 4 is the structural block diagram of the control device of access file according to an embodiment of the present invention, can be applied in client
Or in server, as shown in figure 4, the device includes: detection module 40, identification module 42, blocking module 44, wherein
Detection module 40, the operation behavior for test access file destination；
Identification module 42, for identifying the operating main body of the operation behavior in server local, wherein the operation master
Body is the process for triggering the operation behavior；
Blocking module 44 when for not having the access authority to the file destination in the operating main body, intercepts institute
State operation behavior.
Optionally, the identification module includes: reading unit, for acquiring the operation from client in server local
The memory sequence of behavior, wherein the file destination operates in the client；Resolution unit, for parsing the memory
Process identification (PID) in sequence obtains the parent process that the operation behavior corresponds to process；Determination unit, for the parent process is true
It is set to the operating main body of the operation behavior.
Optionally, described device further include: judgment module, for the blocking module intercept the operation behavior it
Before, judge whether the operating right range of the operating main body includes access authority to the file destination；Determining module is used
In when the operating right range of the operating main body includes the access authority to the file destination, the operating main body is determined
Has the access authority to the file destination；It does not include to the file destination in the operating right range of the operating main body
Access authority when, determine that the operating main body does not have the access authority to the file destination.
Optionally, described device further include: first judgment module, for intercepting the operation behavior in the blocking module
Before, whether the operating right range for judging the operating main body includes access authority to the file destination；First determines
Module, described in determining when the operating right range of the operating main body includes the access authority to the file destination
Operating main body has the access authority to the file destination；It does not include to described in the operating right range of the operating main body
When the access authority of file destination, determine that the operating main body does not have the access authority to the file destination.
Optionally, the first judgment module includes: acquiring unit, for obtaining the file permission of the operating main body
Library, wherein the file permission library includes the file identification for allowing the file of the operating main body Lawful access；Judging unit,
For judge the file permission library whether include the file destination file identification；Determination unit, in the file
When authority library includes the file identification of the file destination, determine that the operating right range of the operating main body includes to the mesh
Mark the access authority of file；When the file permission library does not include the file identification of the file destination, the operation is determined
The operating right range of main body does not include the access authority to the file destination.
Optionally, described device further include: the second judgment module, for intercepting the operation behavior in the blocking module
Before, whether the Lawful access object for judging the file destination includes the operating main body；Second determining module, in institute
When the Lawful access object for stating file destination includes the operating main body, determine that the operating main body has to the file destination
Access authority；When the Lawful access object of the file destination does not include the operating main body, the operating main body is determined
Do not have the access authority to the file destination.
Optionally, described device further include: setup module, for being in the Lawful access object for judging the file destination
It is no include the operating main body before, the set of the Lawful access object is set.
Optionally, the setup module includes: collector unit, for collecting multiple software packages by specified channel, wherein
The software package includes the file destination；Processing unit obtains multiple passes for the software package to be installed and decompressed
Join file, wherein the associated with include software package oneself creation file, and together with oneself it is straight by same software package
The file for connecing or creating indirectly；Acquiring unit, for obtaining the Hash information of the multiple associated with, wherein the Hash
Information is used to indicate the identity of associated with；Unit is established, for the corresponding associated with of the Hash information to be determined as institute
The member of Lawful access object is stated, and establishes the incidence relation between the Hash information and the file destination.
Optionally, described device further include: clearance module, for having in the operating main body to the file destination
When access authority, the operation behavior of letting pass.
Optionally, described device further include: trace back block, for the blocking module intercept the operation behavior it
Afterwards, the operating main body is positioned, the calling channel between the operating main body and the file destination is blocked.
It should be noted that terminal and server is only difference of the scheme in executing subject, the control of above-mentioned access file
Each example and optinal plan in device processed equally adapt in the server, and generate identical technical effect.
It should be noted that above-mentioned modules can be realized by software or hardware, for the latter, Ke Yitong
Following manner realization is crossed, but not limited to this: above-mentioned module is respectively positioned in same processor；Alternatively, above-mentioned modules are with any
Combined form is located in different processors.
Embodiment 3
The embodiments of the present invention also provide a kind of storage medium, computer program is stored in the storage medium, wherein
The computer program is arranged to execute the step in any of the above-described embodiment of the method when operation.
Optionally, in the present embodiment, above-mentioned storage medium can be set to store by executing based on following steps
Calculation machine program:
S1, the operation behavior of test access file destination；
S2 identifies the operating main body of the operation behavior in server local, wherein the operating main body is described in triggering
The process of operation behavior；
S3 intercepts the operation behavior when the operating main body does not have the access authority to the file destination.
Optionally, in the present embodiment, above-mentioned storage medium can include but is not limited to: USB flash disk, read-only memory (Read-
Only Memory, referred to as ROM), it is random access memory (Random Access Memory, referred to as RAM), mobile hard
The various media that can store computer program such as disk, magnetic or disk.
The embodiments of the present invention also provide a kind of electronic device, including memory and processor, stored in the memory
There is computer program, which is arranged to run computer program to execute the step in any of the above-described embodiment of the method
Suddenly.
Optionally, above-mentioned electronic device can also include transmission device and input-output equipment, wherein the transmission device
It is connected with above-mentioned processor, which connects with above-mentioned processor.
Optionally, in the present embodiment, above-mentioned processor can be set to execute following steps by computer program:
S1, the operation behavior of test access file destination；
S2 identifies the operating main body of the operation behavior in server local, wherein the operating main body is described in triggering
The process of operation behavior；
S3 intercepts the operation behavior when the operating main body does not have the access authority to the file destination.
Optionally, the specific example in the present embodiment can be with reference to described in above-described embodiment and optional embodiment
Example, details are not described herein for the present embodiment.
Above-mentioned the embodiment of the present application serial number is for illustration only, does not represent the advantages or disadvantages of the embodiments.
In above-described embodiment of the application, all emphasizes particularly on different fields to the description of each embodiment, do not have in some embodiment
The part of detailed description, reference can be made to the related descriptions of other embodiments.
In several embodiments provided herein, it should be understood that disclosed technology contents can pass through others
Mode is realized.Wherein, the apparatus embodiments described above are merely exemplary, such as the division of the unit, only
A kind of logical function partition, there may be another division manner in actual implementation, for example, multiple units or components can combine or
Person is desirably integrated into another system, or some features can be ignored or not executed.Another point, shown or discussed is mutual
Between coupling, direct-coupling or communication connection can be through some interfaces, the INDIRECT COUPLING or communication link of unit or module
It connects, can be electrical or other forms.
The unit as illustrated by the separation member may or may not be physically separated, aobvious as unit
The component shown may or may not be physical unit, it can and it is in one place, or may be distributed over multiple
In network unit.It can select some or all of unit therein according to the actual needs to realize the mesh of this embodiment scheme
's.
It, can also be in addition, each functional unit in each embodiment of the application can integrate in one processing unit
It is that each unit physically exists alone, can also be integrated in one unit with two or more units.Above-mentioned integrated list
Member both can take the form of hardware realization, can also realize in the form of software functional units.
If the integrated unit is realized in the form of SFU software functional unit and sells or use as independent product
When, it can store in a computer readable storage medium.Based on this understanding, the technical solution of the application is substantially
The all or part of the part that contributes to existing technology or the technical solution can be in the form of software products in other words
It embodies, which is stored in a storage medium, including some instructions are used so that a computer
Equipment (can for personal computer, server or network equipment etc.) execute each embodiment the method for the application whole or
Part steps.And storage medium above-mentioned includes: that USB flash disk, read-only memory (ROM, Read-Only Memory), arbitrary access are deposited
Reservoir (RAM, Random Access Memory), mobile hard disk, magnetic or disk etc. be various to can store program code
Medium.
The above is only the preferred embodiment of the application, it is noted that for the ordinary skill people of the art
For member, under the premise of not departing from the application principle, several improvements and modifications can also be made, these improvements and modifications are also answered
It is considered as the protection scope of the application.
Claims (10)
1. a kind of control method for accessing file characterized by comprising
The operation behavior of test access file destination；
The operating main body of the operation behavior is identified in server local, wherein the operating main body is to trigger the operation row
For process；
When the operating main body does not have the access authority to the file destination, the operation behavior is intercepted.
2. the method according to claim 1, wherein identifying the operation master of the operation behavior in server local
Body includes:
The memory sequence of the operation behavior is acquired from client in server local, wherein the file destination operates in institute
It states in client；
The process identification (PID) in the memory sequence is parsed, the parent process that the operation behavior corresponds to process is obtained；
The parent process is determined as to the operating main body of the operation behavior.
3. the method according to claim 1, wherein the method is also wrapped before intercepting the operation behavior
It includes:
Whether the operating right range for judging the operating main body includes access authority to the file destination；
In the access authority that the operating right range of the operating main body includes to the file destination, the operating main body is determined
Has the access authority to the file destination；It does not include to the file destination in the operating right range of the operating main body
Access authority when, determine that the operating main body does not have the access authority to the file destination.
4. according to the method described in claim 3, it is characterized in that, judging whether the operating right range of the operating main body wraps
It includes and includes: to the access authority of the file destination
Obtain the file permission library of the operating main body, wherein the file permission library includes allowing the operating main body legal
The file identification of the file of access；
Judge the file permission library whether include the file destination file identification；
When the file permission library includes the file identification of the file destination, the operating right model of the operating main body is determined
It encloses including the access authority to the file destination；In the file identification that the file permission library does not include the file destination
When, determine that the operating right range of the operating main body does not include the access authority to the file destination.
5. the method according to claim 1, wherein the method is also wrapped before intercepting the operation behavior
It includes:
Whether the Lawful access object for judging the file destination includes the operating main body；
When the Lawful access object of the file destination includes the operating main body, determine that the operating main body has to described
The access authority of file destination；When the Lawful access object of the file destination does not include the operating main body, described in determination
Operating main body does not have the access authority to the file destination.
6. the method stated according to claim 5, which is characterized in that whether wrapped in the Lawful access object for judging the file destination
Before including the operating main body, the method also includes:
Multiple software packages are collected by specified channel, wherein the software package includes the file destination；
The software package is installed and is decompressed, multiple associated withs are obtained, wherein the associated with include software package from
The file of oneself creation, and the file directly or indirectly created together with oneself by same software package；
Obtain the Hash information of the multiple associated with, wherein the Hash information is used to indicate the identity of associated with；
The corresponding associated with of the Hash information is determined as to the member of the Lawful access object, and establishes the Hash letter
Incidence relation between breath and the file destination.
7. the method stated according to claim 1, which is characterized in that the method also includes:
When the operating main body has the access authority to the file destination, the operation behavior of letting pass；Or,
After intercepting the operation behavior, position the operating main body, block the operating main body and the file destination it
Between calling channel.
8. a kind of control device for accessing file characterized by comprising
Detection module, the operation behavior for test access file destination；
Identification module, for identifying the operating main body of the operation behavior in server local, wherein the operating main body is touching
The process for sending out operation behavior described；
Blocking module intercepts the operation when for not having the access authority to the file destination in the operating main body
Behavior.
9. a kind of storage medium, which is characterized in that be stored with computer program in the storage medium, wherein the computer
Program is arranged to perform claim when operation and requires method described in 1 to 7 any one.
10. a kind of electronic device, including memory and processor, which is characterized in that be stored with computer journey in the memory
Sequence, the processor are arranged to run the computer program in method described in perform claim 1 to 7 any one of requirement.
Applications Claiming Priority (4)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201810420369.6A CN108683652A (en) | 2018-05-04 | 2018-05-04 | A kind of method and device of the processing attack of Behavior-based control permission |
| CN2018104203696 | 2018-05-04 | ||
| CN201810668277X | 2018-06-26 | ||
| CN201810668277.XA CN108846287A (en) | 2018-06-26 | 2018-06-26 | A kind of method and device of detection loophole attack |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN109766700A true CN109766700A (en) | 2019-05-17 |
Family
ID=66259682
Family Applications (11)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201811645563.0A Active CN109711171B (en) | 2018-05-04 | 2018-12-29 | Method, device and system for positioning software bugs, storage medium and electronic device |
| CN201811640165.XA Active CN109766696B (en) | 2018-05-04 | 2018-12-29 | Method and device for setting software permission, storage medium and electronic device |
| CN201811645720.8A Pending CN109766700A (en) | 2018-05-04 | 2018-12-29 | Access control method and device, the storage medium, electronic device of file |
| CN201811640656.4A Active CN109829308B (en) | 2018-05-04 | 2018-12-29 | Control policy management method and device, storage medium and electronic device |
| CN201811640174.9A Pending CN109871689A (en) | 2018-05-04 | 2018-12-29 | Hold-up interception method and device, storage medium, the electronic device of operation behavior |
| CN201811640220.5A Pending CN109871690A (en) | 2018-05-04 | 2018-12-29 | The management method and device of equipment permission, storage medium, electronic device |
| CN201811641170.2A Active CN109829310B (en) | 2018-05-04 | 2018-12-29 | Similar attack defense method, device, system, storage medium and electronic device |
| CN201811641292.1A Active CN110443041B (en) | 2018-05-04 | 2018-12-29 | Method, device and system for managing equipment authority, storage medium and electronic device |
| CN201811645703.4A Active CN109766699B (en) | 2018-05-04 | 2018-12-29 | Operation behavior intercepting method and device, storage medium and electronic device |
| CN201811645506.2A Pending CN109711170A (en) | 2018-05-04 | 2018-12-29 | Protect the method and device of the abnormal operation behavior of PDF |
| CN201811645250.5A Pending CN109711169A (en) | 2018-05-04 | 2018-12-29 | Means of defence and device, system, storage medium, the electronic device of system file |
Family Applications Before (2)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201811645563.0A Active CN109711171B (en) | 2018-05-04 | 2018-12-29 | Method, device and system for positioning software bugs, storage medium and electronic device |
| CN201811640165.XA Active CN109766696B (en) | 2018-05-04 | 2018-12-29 | Method and device for setting software permission, storage medium and electronic device |
Family Applications After (8)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201811640656.4A Active CN109829308B (en) | 2018-05-04 | 2018-12-29 | Control policy management method and device, storage medium and electronic device |
| CN201811640174.9A Pending CN109871689A (en) | 2018-05-04 | 2018-12-29 | Hold-up interception method and device, storage medium, the electronic device of operation behavior |
| CN201811640220.5A Pending CN109871690A (en) | 2018-05-04 | 2018-12-29 | The management method and device of equipment permission, storage medium, electronic device |
| CN201811641170.2A Active CN109829310B (en) | 2018-05-04 | 2018-12-29 | Similar attack defense method, device, system, storage medium and electronic device |
| CN201811641292.1A Active CN110443041B (en) | 2018-05-04 | 2018-12-29 | Method, device and system for managing equipment authority, storage medium and electronic device |
| CN201811645703.4A Active CN109766699B (en) | 2018-05-04 | 2018-12-29 | Operation behavior intercepting method and device, storage medium and electronic device |
| CN201811645506.2A Pending CN109711170A (en) | 2018-05-04 | 2018-12-29 | Protect the method and device of the abnormal operation behavior of PDF |
| CN201811645250.5A Pending CN109711169A (en) | 2018-05-04 | 2018-12-29 | Means of defence and device, system, storage medium, the electronic device of system file |
Country Status (1)
| Country | Link |
|---|---|
| CN (11) | CN109711171B (en) |
Cited By (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110532764A (en) * | 2019-08-19 | 2019-12-03 | 维沃移动通信有限公司 | A kind of method, mobile terminal and the readable storage medium storing program for executing of permission processing |
| CN111881467A (en) * | 2020-06-12 | 2020-11-03 | 海光信息技术有限公司 | Method and device for protecting file by using security processor, CPU and computer equipment |
| CN112395537A (en) * | 2019-08-15 | 2021-02-23 | 奇安信安全技术(珠海)有限公司 | Website tamper-proofing method and device, storage medium and electronic device |
| CN113625968A (en) * | 2021-08-12 | 2021-11-09 | 网易（杭州）网络有限公司 | File authority management method and device, computer equipment and storage medium |
| WO2023216989A1 (en) * | 2022-05-11 | 2023-11-16 | 华为技术有限公司 | Method for converting file format, and electronic device |
Families Citing this family (16)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110347655A (en) * | 2019-06-12 | 2019-10-18 | 江苏富山软件科技有限公司 | A kind of distributed file system access frame |
| CN110968872A (en) * | 2019-11-20 | 2020-04-07 | 北京国舜科技股份有限公司 | File vulnerability detection processing method and device, electronic equipment and storage medium |
| CN110908822B (en) * | 2019-11-26 | 2022-02-22 | 珠海格力电器股份有限公司 | Intelligent hardware anti-false-collision method and device, storage medium and electronic equipment |
| CN111049855B (en) * | 2019-12-25 | 2022-02-01 | 北京天融信网络安全技术有限公司 | Label-based policy configuration method and device |
| CN111143225B (en) * | 2019-12-26 | 2024-05-14 | 深圳市元征科技股份有限公司 | Vulnerability processing method of automobile diagnosis software and related products |
| CN113515389B (en) * | 2020-04-09 | 2024-03-01 | 奇安信安全技术(珠海)有限公司 | Method and device for calling intermediate interface, system, storage medium and electronic device |
| WO2022032950A1 (en) * | 2020-08-10 | 2022-02-17 | 华为技术有限公司 | Defense method, defense apparatus and defense system for malicious software |
| CN112149159A (en) * | 2020-08-26 | 2020-12-29 | 网神信息技术（北京）股份有限公司 | Permission setting method and device of terminal, electronic equipment and storage medium |
| CN112311851B (en) * | 2020-09-25 | 2022-04-01 | 新华三大数据技术有限公司 | Network policy configuration method and device |
| CN112769806B (en) * | 2020-12-31 | 2023-06-23 | 北京明朝万达科技股份有限公司 | Method and device for controlling operation behaviors on terminal equipment and electronic equipment |
| CN112765663B (en) * | 2021-01-25 | 2024-04-26 | 北京北信源信息安全技术有限公司 | File access control method, device, equipment, server and storage medium |
| CN113032830A (en) * | 2021-03-26 | 2021-06-25 | 北京有竹居网络技术有限公司 | Electronic equipment control method and device and electronic equipment |
| CN113051550A (en) * | 2021-03-30 | 2021-06-29 | 深信服科技股份有限公司 | Terminal equipment, protection method and device thereof and readable storage medium |
| CN113395288B (en) * | 2021-06-24 | 2022-06-24 | 浙江德迅网络安全技术有限公司 | Active defense DDOS system based on SDWAN |
| CN114338139B (en) * | 2021-12-27 | 2023-03-24 | 北京安博通科技股份有限公司 | Method for internet behavior management supporting terminal type control |
| CN115967548B (en) * | 2022-12-04 | 2024-04-09 | 深圳市众志天成科技有限公司 | Safety protection index optimization method based on big data information safety and artificial intelligence system |
Citations (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1936915A (en) * | 2006-09-15 | 2007-03-28 | 毛德操 | Method for controlling file access in operation system according to user's action history |
| CN104680084A (en) * | 2015-03-20 | 2015-06-03 | 北京瑞星信息技术有限公司 | Method and system for protecting user privacy in computer |
| US20160171197A1 (en) * | 2011-02-11 | 2016-06-16 | Allure Security Technology Inc. | System level user behavior biometrics using feature extraction and modeling |
| CN106548048A (en) * | 2016-10-28 | 2017-03-29 | 北京优炫软件股份有限公司 | A kind of method for Process flowchart, device and system |
| US20170180137A1 (en) * | 2015-12-21 | 2017-06-22 | Electro Industries/Gauge Tech | Providing security in an intelligent electronic device |
| CN107103245A (en) * | 2016-02-23 | 2017-08-29 | 中兴通讯股份有限公司 | The right management method and device of file |
| CN107169359A (en) * | 2017-06-06 | 2017-09-15 | 北京奇虎科技有限公司 | Utilize the document means of defence and device, electronic equipment for triggering file realization |
| CN107229860A (en) * | 2016-03-24 | 2017-10-03 | 中国电子科技集团公司电子科学研究院 | The method and system of safety management desktop application in environment is concentrated |
| CN107508801A (en) * | 2017-08-04 | 2017-12-22 | 安徽智圣通信技术股份有限公司 | A kind of file tamper-proof method and device |
Family Cites Families (69)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN100489728C (en) * | 2004-12-02 | 2009-05-20 | 联想(北京)有限公司 | Method for establishing trustable operational environment in a computer |
| US9307397B2 (en) * | 2005-04-29 | 2016-04-05 | Jasper Technologies, Inc. | Method for enabling a wireless device with customer-specific services |
| US7954158B2 (en) * | 2006-12-19 | 2011-05-31 | International Business Machines Corporation | Characterizing computer attackers |
| CN101217396B (en) * | 2007-12-29 | 2010-08-11 | 华中科技大学 | An Ad hoc network invasion detecting method and system based on trust model |
| US20100005514A1 (en) * | 2008-07-01 | 2010-01-07 | Chengdu Huawei Symantec Technologies Co., Ltd. | Method, system and server for file rights control |
| CN101667230B (en) * | 2008-09-02 | 2013-10-23 | 北京瑞星信息技术有限公司 | Method and device for monitoring script execution |
| CN101697212A (en) * | 2009-10-15 | 2010-04-21 | 金蝶软件（中国）有限公司 | ERP system and method and device for controlling user permissions thereof |
| CN101827096B (en) * | 2010-04-09 | 2012-09-05 | 潘燕辉 | Cloud computing-based multi-user collaborative safety protection system and method |
| CN101834875B (en) * | 2010-05-27 | 2012-08-22 | 华为技术有限公司 | Method, device and system for defending DDoS (Distributed Denial of Service) attacks |
| US20120297461A1 (en) * | 2010-12-02 | 2012-11-22 | Stephen Pineau | System and method for reducing cyber crime in industrial control systems |
| US20120159567A1 (en) * | 2010-12-21 | 2012-06-21 | Enterproid Hk Ltd | Contextual role awareness |
| CN102622536B (en) * | 2011-01-26 | 2014-09-03 | 中国科学院软件研究所 | Method for catching malicious codes |
| US9143529B2 (en) * | 2011-10-11 | 2015-09-22 | Citrix Systems, Inc. | Modifying pre-existing mobile applications to implement enterprise security policies |
| US20140032733A1 (en) * | 2011-10-11 | 2014-01-30 | Citrix Systems, Inc. | Policy-Based Application Management |
| CN102567675B (en) * | 2012-02-15 | 2015-09-30 | 合一网络技术(北京)有限公司 | Method for managing user right under a kind of operation system and system |
| CN103313343B (en) * | 2012-03-13 | 2018-12-18 | 百度在线网络技术（北京）有限公司 | A kind of method and apparatus for realizing user access control |
| CN104854561B (en) * | 2012-10-16 | 2018-05-11 | 思杰系统有限公司 | Application program for application management framework encapsulates |
| CN103020529B (en) * | 2012-10-31 | 2015-12-09 | 中国航天科工集团第二研究院七○六所 | A kind of software vulnerability analytical approach based on model of place |
| CN103839003B (en) * | 2012-11-22 | 2018-01-30 | 腾讯科技（深圳）有限公司 | Malicious file detection method and device |
| CN103020512B (en) * | 2012-11-26 | 2015-03-04 | 清华大学 | Realization method and control system for safe control flow of system |
| CN103294950B (en) * | 2012-11-29 | 2016-07-06 | 北京安天电子设备有限公司 | A kind of high-power secret information stealing malicious code detecting method based on backward tracing and system |
| CN102945356B (en) * | 2012-12-12 | 2015-11-18 | 上海交通大学 | The access control method of search engine under cloud environment and system |
| US9245128B2 (en) * | 2013-03-06 | 2016-01-26 | Microsoft Technology Licensing, Llc | Limiting enterprise applications and settings on devices |
| CN103198253B (en) * | 2013-03-29 | 2016-03-30 | 北京奇虎科技有限公司 | The method and system of operating file |
| CN103440460A (en) * | 2013-09-09 | 2013-12-11 | 中国农业银行股份有限公司 | Application system change validation method and system |
| CN103440140A (en) * | 2013-09-11 | 2013-12-11 | 昆山富泰科电脑有限公司 | System for classifying applications of intelligent device and setting use permission |
| CN103559446B (en) * | 2013-11-13 | 2017-02-08 | 厦门市美亚柏科信息股份有限公司 | Dynamic virus detection method and device for equipment based on Android system |
| CN103617379B (en) * | 2013-11-29 | 2016-08-17 | 乐视云计算有限公司 | A kind of method for broadcasting multimedia file and player |
| IL229907A (en) * | 2013-12-10 | 2015-02-26 | David Almer | Mobile device with improved security |
| CN103646215A (en) * | 2013-12-23 | 2014-03-19 | 北京奇虎科技有限公司 | Application installation control method, related system and related device |
| CN104169938B (en) * | 2013-12-30 | 2017-10-17 | 华为终端有限公司 | Right management method and device |
| US9519758B2 (en) * | 2014-02-04 | 2016-12-13 | Pegasus Media Security, Llc | System and process for monitoring malicious access of protected content |
| CN105224868B (en) * | 2014-06-03 | 2019-07-23 | 腾讯科技（深圳）有限公司 | The detection method and device of system vulnerability attack |
| CN104239801B (en) * | 2014-09-28 | 2017-10-24 | 北京奇虎科技有限公司 | The recognition methods of 0day leaks and device |
| CN104239764B (en) * | 2014-10-15 | 2017-07-07 | 北京奇虎科技有限公司 | The management-control method and device of terminal device and its systemic-function |
| CN104318160B (en) * | 2014-10-29 | 2017-12-26 | 北京奇虎科技有限公司 | The method and apparatus of killing rogue program |
| CN104361285B (en) * | 2014-11-20 | 2017-12-12 | 工业和信息化部电信研究院 | The safety detection method and device of mobile device application program |
| CN104462985A (en) * | 2014-11-28 | 2015-03-25 | 北京奇虎科技有限公司 | Detecting method and device of bat loopholes |
| CN104468563A (en) * | 2014-12-03 | 2015-03-25 | 北京奇虎科技有限公司 | Website bug protection method, device and system |
| CN104573515A (en) * | 2014-12-19 | 2015-04-29 | 百度在线网络技术（北京）有限公司 | Virus processing method, device and system |
| CN104506630B (en) * | 2014-12-25 | 2019-04-16 | 深圳市华宝电子科技有限公司 | Permissions data generation method, server and system based on user role |
| CN104468632A (en) * | 2014-12-31 | 2015-03-25 | 北京奇虎科技有限公司 | Loophole attack prevention method, device and system |
| CN106295344A (en) * | 2015-05-15 | 2017-01-04 | 中兴通讯股份有限公司 | A kind of method and apparatus ensureing terminal security |
| CN106295328B (en) * | 2015-05-20 | 2019-06-18 | 阿里巴巴集团控股有限公司 | File test method, apparatus and system |
| CN104899511B (en) * | 2015-05-21 | 2018-01-19 | 成都中科慧创科技有限公司 | A kind of active defense method based on program behavior algorithm |
| CN106529230A (en) * | 2015-09-11 | 2017-03-22 | 上海中和软件有限公司 | Role-based permission control mechanism |
| US9740877B2 (en) * | 2015-09-22 | 2017-08-22 | Google Inc. | Systems and methods for data loss prevention while preserving privacy |
| CN106650438A (en) * | 2015-11-04 | 2017-05-10 | 阿里巴巴集团控股有限公司 | Method and device for detecting baleful programs |
| CN105323384A (en) * | 2015-11-25 | 2016-02-10 | 上海斐讯数据通信技术有限公司 | Method for switching multi-scenario mode and mobile terminal |
| CN106055986A (en) * | 2016-05-06 | 2016-10-26 | 北京优炫软件股份有限公司 | Method and device for permission control |
| CN107451159A (en) * | 2016-05-31 | 2017-12-08 | 中国移动通信集团广东有限公司 | A kind of data bank access method and device |
| CN107508783A (en) * | 2016-06-14 | 2017-12-22 | 阿里巴巴集团控股有限公司 | A kind for the treatment of method and apparatus of data |
| CN106169047A (en) * | 2016-07-11 | 2016-11-30 | 北京金山安全软件有限公司 | Method and device for opening monitoring camera and electronic equipment |
| CN106228067A (en) * | 2016-07-15 | 2016-12-14 | 江苏博智软件科技有限公司 | Malicious code dynamic testing method and device |
| CN107872433A (en) * | 2016-09-27 | 2018-04-03 | 腾讯科技（深圳）有限公司 | A kind of auth method and its equipment |
| CN106384051A (en) * | 2016-09-29 | 2017-02-08 | 汉兴德创（武汉）科技有限公司 | Cloud computing-based multi-user cooperative security protection system |
| CN106529290B (en) * | 2016-10-11 | 2020-02-18 | 北京金山安全软件有限公司 | Malicious software protection method and device and electronic equipment |
| CN108062479A (en) * | 2016-11-08 | 2018-05-22 | 杭州施强教育科技有限公司 | A kind of enterprise management system user right collocation method |
| CN106874761A (en) * | 2016-12-30 | 2017-06-20 | 北京邮电大学 | A kind of Android system malicious application detection method and system |
| CN107016283B (en) * | 2017-02-15 | 2019-09-10 | 中国科学院信息工程研究所 | Android privilege-escalation attack safety defense method and device based on integrity verification |
| CN106775903B (en) * | 2017-02-24 | 2021-02-09 | 北京小米移动软件有限公司 | Security policy file updating method and device |
| CN107066889A (en) * | 2017-04-25 | 2017-08-18 | 北京洋浦伟业科技发展有限公司 | A kind of data access control method and system based on geographical location information |
| CN107391977B (en) * | 2017-07-04 | 2020-11-24 | 创新先进技术有限公司 | Permission control and automatic switching method, device and equipment |
| CN107480551B (en) * | 2017-07-06 | 2020-11-20 | 网易（杭州）网络有限公司 | File management method and device |
| CN107392016A (en) * | 2017-07-07 | 2017-11-24 | 四川大学 | A kind of web data storehouse attack detecting system based on agency |
| CN107657169B (en) * | 2017-10-10 | 2020-02-21 | 泰康保险集团股份有限公司 | Authority management method, device, medium and electronic equipment |
| CN107832590A (en) * | 2017-11-06 | 2018-03-23 | 珠海市魅族科技有限公司 | Terminal control method and device, terminal and computer-readable recording medium |
| CN107896210A (en) * | 2017-11-14 | 2018-04-10 | 北京知道创宇信息技术有限公司 | Safety protecting method, device, server and storage medium |
| CN109063436A (en) * | 2018-07-30 | 2018-12-21 | 中国石油化工股份有限公司 | Support the enterprise-level authority managing and controlling and methods for using them more applied |
-
2018
- 2018-12-29 CN CN201811645563.0A patent/CN109711171B/en active Active
- 2018-12-29 CN CN201811640165.XA patent/CN109766696B/en active Active
- 2018-12-29 CN CN201811645720.8A patent/CN109766700A/en active Pending
- 2018-12-29 CN CN201811640656.4A patent/CN109829308B/en active Active
- 2018-12-29 CN CN201811640174.9A patent/CN109871689A/en active Pending
- 2018-12-29 CN CN201811640220.5A patent/CN109871690A/en active Pending
- 2018-12-29 CN CN201811641170.2A patent/CN109829310B/en active Active
- 2018-12-29 CN CN201811641292.1A patent/CN110443041B/en active Active
- 2018-12-29 CN CN201811645703.4A patent/CN109766699B/en active Active
- 2018-12-29 CN CN201811645506.2A patent/CN109711170A/en active Pending
- 2018-12-29 CN CN201811645250.5A patent/CN109711169A/en active Pending
Patent Citations (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1936915A (en) * | 2006-09-15 | 2007-03-28 | 毛德操 | Method for controlling file access in operation system according to user's action history |
| US20160171197A1 (en) * | 2011-02-11 | 2016-06-16 | Allure Security Technology Inc. | System level user behavior biometrics using feature extraction and modeling |
| CN104680084A (en) * | 2015-03-20 | 2015-06-03 | 北京瑞星信息技术有限公司 | Method and system for protecting user privacy in computer |
| US20170180137A1 (en) * | 2015-12-21 | 2017-06-22 | Electro Industries/Gauge Tech | Providing security in an intelligent electronic device |
| CN107103245A (en) * | 2016-02-23 | 2017-08-29 | 中兴通讯股份有限公司 | The right management method and device of file |
| CN107229860A (en) * | 2016-03-24 | 2017-10-03 | 中国电子科技集团公司电子科学研究院 | The method and system of safety management desktop application in environment is concentrated |
| CN106548048A (en) * | 2016-10-28 | 2017-03-29 | 北京优炫软件股份有限公司 | A kind of method for Process flowchart, device and system |
| CN107169359A (en) * | 2017-06-06 | 2017-09-15 | 北京奇虎科技有限公司 | Utilize the document means of defence and device, electronic equipment for triggering file realization |
| CN107508801A (en) * | 2017-08-04 | 2017-12-22 | 安徽智圣通信技术股份有限公司 | A kind of file tamper-proof method and device |
Cited By (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN112395537A (en) * | 2019-08-15 | 2021-02-23 | 奇安信安全技术(珠海)有限公司 | Website tamper-proofing method and device, storage medium and electronic device |
| CN110532764A (en) * | 2019-08-19 | 2019-12-03 | 维沃移动通信有限公司 | A kind of method, mobile terminal and the readable storage medium storing program for executing of permission processing |
| CN111881467A (en) * | 2020-06-12 | 2020-11-03 | 海光信息技术有限公司 | Method and device for protecting file by using security processor, CPU and computer equipment |
| CN111881467B (en) * | 2020-06-12 | 2022-10-28 | 海光信息技术股份有限公司 | Method and device for protecting file by using security processor, CPU and computer equipment |
| CN113625968A (en) * | 2021-08-12 | 2021-11-09 | 网易（杭州）网络有限公司 | File authority management method and device, computer equipment and storage medium |
| CN113625968B (en) * | 2021-08-12 | 2024-03-01 | 网易（杭州）网络有限公司 | File authority management method and device, computer equipment and storage medium |
| WO2023216989A1 (en) * | 2022-05-11 | 2023-11-16 | 华为技术有限公司 | Method for converting file format, and electronic device |
Also Published As
| Publication number | Publication date |
|---|---|
| CN109829310A (en) | 2019-05-31 |
| CN109766699B (en) | 2022-02-15 |
| CN110443041A (en) | 2019-11-12 |
| CN109766699A (en) | 2019-05-17 |
| CN109711171B (en) | 2021-07-20 |
| CN109766696A (en) | 2019-05-17 |
| CN109871690A (en) | 2019-06-11 |
| CN109829308B (en) | 2022-02-15 |
| CN109871689A (en) | 2019-06-11 |
| CN109711170A (en) | 2019-05-03 |
| CN109711169A (en) | 2019-05-03 |
| CN109766696B (en) | 2021-01-15 |
| CN110443041B (en) | 2022-09-30 |
| CN109829310B (en) | 2021-04-27 |
| CN109829308A (en) | 2019-05-31 |
| CN109711171A (en) | 2019-05-03 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN109766700A (en) | Access control method and device, the storage medium, electronic device of file | |
| CN110113167B (en) | Information protection method and system of intelligent terminal and readable storage medium | |
| CN109743315B (en) | Behavior identification method, behavior identification device, behavior identification equipment and readable storage medium for website | |
| CN106295328B (en) | File test method, apparatus and system | |
| CN103607385B (en) | Method and apparatus for security detection based on browser | |
| CN111274583A (en) | Big data computer network safety protection device and control method thereof | |
| CN108259514B (en) | Vulnerability detection method and device, computer equipment and storage medium | |
| CN112685682B (en) | Method, device, equipment and medium for identifying forbidden object of attack event | |
| WO2015183698A1 (en) | Method and system for implementing data security policies using database classification | |
| CN107302586B (en) | Webshell detection method and device, computer device and readable storage medium | |
| CN107465702B (en) | Early warning method and device based on wireless network intrusion | |
| CN112165455A (en) | Data access control method and device, computer equipment and storage medium | |
| CN106131021B (en) | Request authentication method and system | |
| CN110880983A (en) | Penetration testing method and device based on scene, storage medium and electronic device | |
| CN105577633A (en) | Verification method and terminal | |
| CN112134893A (en) | Internet of things safety protection method and device, electronic equipment and storage medium | |
| CN110581835B (en) | Vulnerability detection method and device and terminal equipment | |
| CN110839025A (en) | Centralized web penetration detection honeypot method, device and system and electronic equipment | |
| CN106992859A (en) | A kind of fort machine private key management method and device | |
| CN110135162A (en) | The recognition methods of the back door WEBSHELL, device, equipment and storage medium | |
| CN108985040B (en) | Method and apparatus, storage medium and the processor logged in using cipher key | |
| CN112804222B (en) | Data transmission method, device, equipment and storage medium based on cloud deployment | |
| CN113965406A (en) | Network blocking method, device, electronic device and storage medium | |
| CN114257404B (en) | Abnormal external connection statistical alarm method, device, computer equipment and storage medium | |
| CN112333144B (en) | Data security system and method of communication module |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20190517 |
|
| RJ01 | Rejection of invention patent application after publication |